Some questions about active directory's users importation

[inspiron82]

Hi,
i have to import all users and groups of Active Directory in Alfresco, and to periodically synch Alfresco' users and groups with AD's one.

scenario:
Alfresco war 3c
JVM 1.5
OS: Solaris 10

I'm very confused 'cause i read a lot of guide, wiki, forum and so on, but i can't understand if i ahve to use ntml,cifs,ldap,chaining….
For the moment I configured NTLM, and i can connect to Alfresco with username and password of people that are in AD.
But now i have to import ALL AD's users and groups in Alfresco. I have to support SSO, but it's ok for the moment with NTLM, and in future we'll use SSL.
Can you suggest me which tecnique is the best for my purpose and some guides relating to it?
I have to finish this project ASAP.
If u nedd some other info, u have just to ask.

Thank you in advance

[inspiron82]

is it a good idea to use NTLM for authentication and ldap-synchronisation to import AD's users and groups?
Can i use ldap-synch without using ldap-authentication?
Do i need CIFS to use ldap-authentication?

[inspiron82]

ok,
now i have ldap sync workin' fine.
Now i would like to have SSO too.
Can i use NTLM authentication in combination with ldap auth/sync?
thanks

[_sax]

Yes you can :wink:  - this being a good idea, too, because LDAP authentication can be cumbersome.
We managed to get the configuration you want to implement to work with 2.1, 2.9b and 3.0x, the 3-series being somewhat problematic, if you opt for the CIFS file share, too.
To configure your installation, it is crucial to follow the steps that are laid out for your version - it differs a lot.
The wiki has good starting points, but if you mention your version, I might help, too.
http://wiki.alfresco.com/wiki/Configuring_NTLM for 2.x
http://wiki.alfresco.com/wiki/3.0_Configuring_NTLM